$ rpki-client -vvf rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/BFA3B5F81FC911EA8CF04E61C4F9AE02.roa File: BFA3B5F81FC911EA8CF04E61C4F9AE02.roa (raw, json) Hash identifier: MhK6fjpCgRPkr/iKRfOswI8Vu+Z6RpVv9J3L3B3Ndho= Subject key identifier: 93:95:DC:D5:B5:AA:07:72:5B:8C:2C:93:A7:DF:02:0E:F9:89:FF:BD Certificate issuer: /CN=A918E20E/serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2 Certificate serial: 0C4E Authority key identifier: AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/BFA3B5F81FC911EA8CF04E61C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:42:55 +0000 ROA not before: Sat 26 Jul 2025 19:29:14 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 137981 IP address blocks: 103.119.75.0/24 maxlen: 24 103.143.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.crl rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3150 (0xc4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E20E, serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2 Validity Not Before: Jul 26 19:29:14 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4263e-4999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5a:5f:42:7c:e2:f2:31:04:1a:e2:70:0c:33: 8d:0e:51:08:4f:57:6d:b8:1e:0d:28:8d:2f:1e:de: 9a:e1:b2:ea:c0:3f:2c:aa:0f:4c:ad:69:7c:40:a7: 41:be:9a:d0:3f:a2:f1:a6:46:0c:99:17:cc:17:e1: 2e:b2:6a:c6:d4:40:6a:b0:9f:2b:74:2c:50:16:2b: 25:97:89:d5:52:e1:cb:b3:cb:29:bb:8a:57:45:d9: a7:d4:f8:57:4d:fc:6c:63:2f:15:d3:c3:86:6d:60: 80:f3:3f:e9:1d:6a:fa:1f:81:51:97:62:7c:0d:86: c9:45:b8:3c:c7:6d:ec:dd:90:b3:2d:81:c0:d8:4a: c5:70:b7:8d:9a:24:2c:2e:d2:29:67:e1:5d:fb:5d: 7f:cb:2b:4e:96:83:f9:b9:d7:1d:69:45:70:04:47: 09:e2:79:ca:1e:59:61:f2:df:1d:c7:e0:7d:fb:b0: 94:52:3e:c8:f4:f6:e6:29:ba:ea:3b:38:f3:24:b0: 50:86:39:fb:44:fc:44:cd:c2:81:f9:70:3d:f1:b9: 0a:6f:0d:10:d0:c4:ba:ab:e9:0d:f3:b4:c0:9a:3d: 52:cc:4d:17:e6:8e:72:d5:53:b2:e4:1c:64:0d:bb: 75:3b:92:06:f6:6a:f8:d5:04:81:a2:02:15:c6:91: c5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:95:DC:D5:B5:AA:07:72:5B:8C:2C:93:A7:DF:02:0E:F9:89:FF:BD X509v3 Authority Key Identifier: keyid:AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/BFA3B5F81FC911EA8CF04E61C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.119.75.0/24 103.143.252.0/24 Signature Algorithm: sha256WithRSAEncryption 06:40:b2:1c:67:9c:8a:68:f0:2e:2a:61:5d:b4:6d:1d:76:0a: 48:74:fa:56:a9:82:4d:87:10:cf:2a:67:07:39:f9:a7:f4:31: 0e:85:df:3f:ed:42:ad:28:9b:c3:a3:4a:d5:1d:61:21:66:e8: b1:2c:be:71:d1:3b:2f:ab:f1:7d:21:d3:b7:5b:53:2b:88:15: d3:ef:d4:ad:34:6e:43:fa:55:d8:ec:11:58:0a:f1:3a:a7:72: 48:8b:6f:6c:89:2a:19:26:2e:3c:92:26:ba:37:02:5d:14:45: 3f:28:f0:22:5b:53:0e:31:ed:e7:a5:df:c5:63:4d:b4:8d:7c: f0:c9:c7:25:c8:3e:06:84:0c:94:6d:95:b6:b6:d4:9a:92:2c: 84:57:73:90:ce:81:15:c9:de:2f:2c:4e:11:ed:8e:0a:7b:78: 32:1c:8f:c9:e1:33:e2:78:b7:0a:7e:bb:a5:2b:39:7f:18:f2: 82:69:ee:9e:b3:6a:c0:bc:3f:65:b2:76:b4:7c:bc:75:cb:e6: 4c:c8:a4:d1:f8:c5:36:3c:5f:dc:85:d7:cc:b1:43:79:84:21: 08:d0:46:9f:0f:5b:5f:74:18:1f:7e:bc:2c:7a:91:52:17:ec: e8:6f:f4:1a:30:dd:8f:8f:c8:06:60:dd:d8:1b:ee:f4:cf:ec: c6:af:0d:b6 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUyMEUxMTAvBgNVBAUTKEFGNkExOERCM0EwNzFFRjE4Q0NBNUJFOEIzNTQzM0RG NTQ0RjBGQjIwHhcNMjUwNzI2MTkyOTE0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjYzZS00OTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVpfQnzi8jEEGuJwDDONDlEIT1dtuB4NKI0vHt6a4bLqwD8sqg9MrWl8QKdB vprQP6LxpkYMmRfMF+EusmrG1EBqsJ8rdCxQFisll4nVUuHLs8spu4pXRdmn1PhX TfxsYy8V08OGbWCA8z/pHWr6H4FRl2J8DYbJRbg8x23s3ZCzLYHA2ErFcLeNmiQs LtIpZ+Fd+11/yytOloP5udcdaUVwBEcJ4nnKHllh8t8dx+B9+7CUUj7I9PbmKbrq OzjzJLBQhjn7RPxEzcKB+XA98bkKbw0Q0MS6q+kN87TAmj1SzE0X5o5y1VOy5Bxk Dbt1O5IG9mr41QSBogIVxpHFeQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJOV3NW1 qgdyW4wsk6ffAg75if+9MB8GA1UdIwQYMBaAFK9qGNs6Bx7xjMpb6LNUM99UTw+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTIwRS8yM0FBRDk4RTFG QzgxMUVBODQ1OTRGNUVDNEY5QUUwMi9yMm9ZMnpvSEh2R015bHZvczFRejMxUlBE N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Iyb1kyem9ISHZHTXlsdm9zMVF6MzFSUEQ3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEUyMEUvMjNBQUQ5OEUxRkM4MTFFQTg0NTk0RjVFQzRGOUFFMDIvQkZBM0I1Rjgx RkM5MTFFQThDRjA0RTYxQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ3dLAwQAZ4/8MA0GCSqGSIb3DQEBCwUAA4IBAQAGQLIcZ5yKaPAu KmFdtG0ddgpIdPpWqYJNhxDPKmcHOfmn9DEOhd8/7UKtKJvDo0rVHWEhZuixLL5x 0Tsvq/F9IdO3W1MriBXT79StNG5D+lXY7BFYCvE6p3JIi29siSoZJi48kia6NwJd FEU/KPAiW1MOMe3npd/FY020jXzwycclyD4GhAyUbZW2ttSakiyEV3OQzoEVyd4v LE4R7Y4Ke3gyHI/J4TPieLcKfrulKzl/GPKCae6es2rAvD9lsna0fLx1y+ZMyKTR +MU2PF/chdfMsUN5hCEI0EafD1tfdBgffrwsepFSF+zob/QaMN2Pj8gGYN3YG+70 z+zGrw22 -----END CERTIFICATE-----Generated at Mon Mar 2 15:28:16 2026 by rpki-client